QID 316949

A vulnerability in the authentication for the general purpose APIs implementation of Cisco Email Security Appliance (ESA),
Cisco Content Security Management Appliance (SMA), and Cisco Web Security Appliance (WSA)
could allow an unauthenticated, remote attacker to access general
system information and certain configuration information from an affected device.

Affected Products
Cisco ESA, Cisco SMA, and Cisco WSA if they supported general purpose API. ESA Release From 13.0 Prior to 13.5.2 SMA Release From 12.5 Prior to 13.8.0 WSA Release From 11.8 Prior to 12.5.1

QID Detection Logic (Authenticated):
The check matches Cisco ESA OS version and Cisco SMA OS version retrieved via Unix Auth using "version" command.

A successful exploit could allow the attacker to obtain system and configuration information from the affected device, resulting in an unauthorized information disclosure.